CVE-2025-55853

CVE-2025-55853 - Inclusioni Locali di File tramite Server Side Request Forgery SoftVision webPDF prima della versione 10.0.2 è vulnerabile a Server-Side Request Forgery SSRF. Informazioni Questo PoC per CVE-2025-55853 dimostra Server-Side Request Forgery nel tool webPDF webPDF. utilizzato per...

CVE-2025-15368-Exploit

Strumento di Exploit CVE-2025-15368 Plugin SportsPress per WordPress = 2.7.26 - LFI e RCE Autore: kazehere4you Data: 2026-02-11 Descrizione Questo strumento sfrutta una vulnerabilità di Local File Inclusion LFI nel plugin SportsPress per WordPress versioni fino alla 2.7.26 incluse. Sfruttando lo...

CVE-2025-2294

CVE-2025-2294 🚨 CVE-2025-2294 - Local File Inclusion LFI भेद्यता Kubio AI Page Builder for WordPress में 🧱 🔍 अवलोकन CVE-2025-2294 एक गंभीर 🔥 स्थानीय फ़ाइल समावेशन LFI भेद्यता है जो WordPress के लिए Kubio AI Page Builder प्लगइन संस्करण 2.5.1 तक और सहित को प्रभावित करती है। यह दोष अनधिकृत दूरस्थ...

CVE-2024-4956

CVE-2024-4956 Schnelle und einfache Ausnutzung von CVE-2024-4956 für LFI basierend auf dem ursprünglichen PoC von: VeryLazyTech, https://github.com/verylazytech/CVE-2024-4956. Diese Implementierung nimmt 2 Argumente entgegen, url und file, und gibt die Dateiausgabe aus, falls die Datei gefunden...

cve-2022-44268

CVE-2022-44268 ImageMagick è una suite software gratuita e open-source multipiattaforma per visualizzare, convertire e modificare immagini raster e vettoriali. Può leggere e scrivere oltre 200 formati di file immagine. ImageMagick è rilasciato sotto licenza Apache 2.0. È disponibile sotto forma d...

CVE-2025-68645-Exploiting-Zimbra-Webmail-LFI-Vulnerability

CVE-2025-68645 — LFI della Classic UI di Zimbra Defender Pack Questo repository è un pacchetto di riferimento orientato ai difensori per CVE-2025-68645 , un problema di Local File Inclusion LFI in Zimbra Collaboration ZCS 10.0.x e 10.1.x Classic Webmail UI causato da una gestione impropria dei...

CVE_2026_7515

CVE20267515 CVE-2026-7515: BetterDocs Pro = 3.8.0 - Nicht authentifizierte Local File Inclusion zu RCE-Exploit...

Elastix-2.2.0-CVE-2012-4869

Elastix 2.2.0 Local-File-Inclusion-Exploit - CVE-2012-4869 Beschreibung Dieses Skript nutzt eine Local File Inclusion LFI-Schwachstelle in Elastix 2.2.0 aus, die Remote-Codeausführung RCE ermöglicht, indem Befehle über den callmepage.php -Endpunkt eingeschleust werden. Der Exploit basiert auf...

CVE-2025-60574

Scopritori di vulnerabilità e autori di exploit Stefano Andreatta & Jacopo Candido Augelli CVE-2025-60574 Descrizione della vulnerabilità Una vulnerabilità di Local File Inclusion LFI è stata identificata in tQuadra CMS 4.2.1117. Il problema esiste nel percorso "/styles/", che non riesce a...

CVE-2025-11973

Auslöser: /etc/passwd über file:// auslesen und in Uploads exfiltrieren root@kitploit: curl -sS -A "$UA" -X POST "$BASE/?kdsflag=post" \ --data-urlencode "kdspassword=$SECRET" \ --data-urlencode "posttitle=sub1-lfi" \ --data-urlencode "kdsfeatureurl=file:///etc/passwd" Exfiltrierte Datei abrufen...

CVE-2024-24919

CVE-2024-24919 يهدف هذا المشروع إلى إنشاء أتمتة لدراسة ثغرة CVE-2024-24919 بشكل أفضل. api.py : يجمع عناوين IP المحتملة المعرّضة للثغرة. CVE-2024-24919.py : يقوم بالهجوم بالقوة الغاشمة باستخدام ملف عناوين IP وملف الدلائل. worldListLFI.txt : قائمة بدلائل نظام لينكس. الاستخدام استنسخ هذا المستودع عل...

CVE-2025-2294

CVE-2025-2294 परिचय CVE-2025-2294 — WordPress के लिए Kubio AI Page Builder प्लगइन में Local File Inclusion LFI प्रकार की एक गंभीर भेद्यता है। यह भेद्यता अप्रमाणित unauthenticated दूरस्थ हमलावर को एक विशेष रूप से तैयार पैरामीटर भेजने की अनुमति देती है, जिससे प्लगइन सर्वर पर किसी मनमानी फ़ाइल को...

apache_2.4.50

Apache HTTP Server 2.4.50 LFI & RCE Uno script python3 per CVE-2021-42013 - Apache HTTP Server 2.4.50 LFI & RCE. RCE richiede che cgi-bin sia abilitato Per Iniziare Esecuzione del programma LFI root@kitploit: python3 apache2.4.50.py -t http://apache.hack/ -lfi /etc/passwd RCE root@kitploit: pytho...

CVE-2019-5418

CVE-2019-5418: Ruby on Rails Path Traversal & beliebiges Dateilesen Dieses Projekt ist eine Umgebung zum Üben und Reproduzieren der Local File Inclusion-Schwachstelle CVE-2019-5418 in Ruby on Rails. Die Schwachstelle ermöglicht es, durch Path Traversal über den Accept-Header beliebige Dateien im...

CVE-2022-46364---Apache-CXF-XOP-Include-LFI-PoC

Apache CXF XOP Include LFI CVE-2022-46364 Übersicht Dieses Repository enthält einen Proof-of-Concept PoC-Exploit für CVE-2022-46364 , eine Local File Inclusion LFI-Sicherheitslücke in Apache CXF. Die Sicherheitslücke entsteht durch unsachgemäße Handhabung von XOP XML-binary Optimized Packaging...

liffy

Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...

CVE-2021-41773

Scanner CVE-2021-41773 Este script testa a vulnerabilidade de path traversal e inclusão local de arquivos no Apache versão 2.4.29. Este script não retorna arquivos locais, apenas verifica o servidor web e informa se ele é vulnerável ou não. Uso: python3 cve-2021-41773-scanner.py Endereço IPv4...

CVE-2026-63179 Winter: Local File Inclusion through @import directives in LESS compilation of backend customizable stylesheets and theme assets

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, authenticated backend users can disclose arbitrary files readable by the PHP process by injecting @import inline directives into LESS source that the backend compiles, because the...

CVE-2026-63179

Winter CMS (a Laravel-based PHP content management system) versions up to and including 1.2.12 allow authenticated backend users to disclose arbitrary files readable by the PHP process. The root cause is that the LESS parser (via the wikimedia/less.php integration in Winter Storm) was instantiate...

CVE-2026-63179 Winter: Local File Inclusion through @import directives in LESS compilation of backend customizable stylesheets and theme assets

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, authenticated backend users can disclose arbitrary files readable by the PHP process by injecting @import inline directives into LESS source that the backend compiles, because the...